NEAS[.]89d33d83eee7c19feb857f16b7d69340[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.89d33d83eee7c19feb857f16b7d69340.exe
Size

66KB
MD5

89d33d83eee7c19feb857f16b7d69340
SHA1

0e0597169806f4ea14da388f62402a34489e1434
SHA256

e484038afe9d5bb8f5a14371211910224baab498447c9a86d6134806b56f2e25
SHA512

a7a57d29dd68ab98926c2995eb0b70ee8f413efc50da2c1bd427233b6a997659150bd068fe730b2e70736e0eb72f9883892fb1c4a8861df51af3f6272b22234d
SSDEEP

1536:bwdr2mEllf97egXe6Lf0Q4JkRkneTn6mtpz8Mey5/HhWOKXaIp4tv:cdro7KMstJdn86upz8MT58Oc4tv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.89d33d83eee7c19feb857f16b7d69340.exe

Files

NEAS.89d33d83eee7c19feb857f16b7d69340.exe
.exe windows:4 windows x86

9a4916e52486f251fc82c6d7002fe6b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryA
GetQueuedCompletionStatus
SetConsoleMode
GetFirmwareEnvironmentVariableW
GetNumaHighestNodeNumber
BuildCommDCBA
OpenFileById
CreateTapePartition
WritePrivateProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE